Show filters
118 Total Results
Displaying 1-10 of 118
Sort by:
Attacker Value
Unknown
CVE-2023-23477
Disclosure Date: February 03, 2023 (last updated November 08, 2023)
IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to execute arbitrary code on the system with a specially crafted sequence of serialized objects. IBM X-Force ID: 245513.
1
Attacker Value
Unknown
CVE-2024-45087
Disclosure Date: November 11, 2024 (last updated November 19, 2024)
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
0
Attacker Value
Unknown
CVE-2024-45073
Disclosure Date: September 30, 2024 (last updated January 12, 2025)
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
0
Attacker Value
Unknown
CVE-2023-50315
Disclosure Date: August 14, 2024 (last updated September 12, 2024)
IBM WebSphere Application Server 8.5 and 9.0 could allow an attacker with access to the network to conduct spoofing attacks. An attacker could exploit this vulnerability using a certificate issued by a trusted authority to obtain sensitive information. IBM X-Force ID: 274714.
0
Attacker Value
Unknown
CVE-2024-37532
Disclosure Date: June 20, 2024 (last updated August 22, 2024)
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to identity spoofing by an authenticated user due to improper signature validation. IBM X-Force ID: 294721.
0
Attacker Value
Unknown
CVE-2023-50313
Disclosure Date: April 02, 2024 (last updated April 09, 2024)
IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security for outbound TLS connections caused by a failure to honor user configuration. IBM X-Force ID: 274812.
0
Attacker Value
Unknown
CVE-2023-35890
Disclosure Date: July 07, 2023 (last updated October 08, 2023)
IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security, caused by the improper encoding in a local configuration file. IBM X-Force ID: 258637.
0
Attacker Value
Unknown
CVE-2022-39161
Disclosure Date: May 03, 2023 (last updated October 08, 2023)
IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and IBM WebSphere Application Server Liberty, when configured to communicate with the Web Server Plug-ins for IBM WebSphere Application Server, could allow an authenticated user to conduct spoofing attacks. A man-in-the-middle attacker could exploit this vulnerability using a certificate issued by a trusted authority to obtain sensitive information. IBM X-Force ID: 235069.
0
Attacker Value
Unknown
CVE-2022-43917
Disclosure Date: January 26, 2023 (last updated November 08, 2023)
IBM WebSphere Application Server 8.5 and 9.0 traditional container uses weaker than expected cryptographic keys that could allow an attacker to decrypt sensitive information. This affects only the containerized version of WebSphere Application Server traditional. IBM X-Force ID: 241045.
0
Attacker Value
Unknown
CVE-2022-40750
Disclosure Date: November 11, 2022 (last updated November 08, 2023)
IBM WebSphere Application Server 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 236588.
0
